Privacy

01Who we are

Gladpaid is operated by Digital Infinity Group LLC, 15732 Los Gatos Blvd #5075, Los Gatos, CA 95032. For the personal data in your account we are the controller. For the business records you bring into the service we process on your behalf, as described in our data processing terms at /legal/dpa.

Questions about this policy or your data: support@gladpaid.com.

02What we collect

Account details: your name, email address, role, and authentication data including two-factor settings and active sessions.

From your ledger, only what matching and posting need: customer names, invoice numbers, amounts, dates and status, the chart of accounts, and lock dates. We do not read bank feeds, payroll or employee records.

Blockchain records: the public wallet addresses you ask us to watch, and the transfers to and from them, including the payer addresses that are evidence for a match.

Documents you upload or forward, such as remittance advice and exchange statements.

Billing details: plan, usage counts and billing contact. Card details are collected and held by Stripe, never by us.

Product usage events and error reports, used to run and improve the service.

03What we never collect

Private keys, recovery phrases, keystore files or any other key material. The service is read-only and never needs them. If key material is submitted anywhere, it is refused before it is stored, it is not written to logs, analytics or error reports, and you are told why.

We never hold, route or move your funds, and we request no payment, bank-feed or signing permission from any provider.

04How we use it, and on what basis

To provide the service you signed up for: matching receipts, valuing them, preparing and posting entries you approve, producing close packs and keeping the audit trail (performance of a contract).

To secure and operate the service, prevent abuse, and measure how it is used in aggregate (legitimate interests).

To keep billing and tax records and answer lawful requests (legal obligation).

To send product emails you have chosen, such as digests and reminders; you can switch these off in settings (consent or legitimate interests, as applicable).

05Automated processing and AI

Matching runs on explicit, per-business rules, not on a trained model. Corrections you make become rules for your business only; nothing is pooled across customers.

A language model is used for one job: reading documents you upload, to extract invoice numbers, amounts and transaction references for a person to confirm. The provider processes that content under zero-retention, no-training terms.

Data obtained from Xero is never sent to a language model unless your business has switched that on, and it is never used to train or fine-tune any model, never combined with other customers' data, and shared with third parties only as the subprocessors listed at /legal/subprocessors.

We do not use your accounting data to train machine-learning models of any kind.

06Who we share it with

Subprocessors that run the service, each under contract and only for its stated purpose. The current list, with purpose and location, is at /legal/subprocessors.

Your accounting provider, when you connect it, so entries can be read and posted.

People you invite into your business, such as a bookkeeper, owner or reviewing accountant, according to their role.

Authorities, where the law requires it. We do not sell personal data and do not share it for cross-context advertising.

07International transfers

The service is hosted in the United States. Where personal data from the European Economic Area, the United Kingdom or Switzerland is transferred, we rely on the European Commission's Standard Contractual Clauses (and the UK addendum) with our subprocessors.

08How long we keep it

Audit events and close packs: 7 years, or until the business is deleted plus any legal minimum. Transfers: for the life of the business in the service. Support email: 2 years. Logs: 30 days.

After a trial ends unpaid or a subscription is cancelled, data stays readable and exportable for 30 days and is deleted after 90 days, with notice by email. A deleted business is purged 30 days after deletion. Billing records are kept as long as the law requires.

The full schedule is at /legal/retention.

09Your rights

Depending on where you live, you may have the right to access your personal data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. Most of this is self-serve: export and deletion are in the app's settings.

For anything else, write to support@gladpaid.com. We answer within 30 days. If you are in the EEA or the UK, you may also complain to your local data protection authority.

Where your personal data sits inside a business's records (for example, as a customer named on an invoice), that business controls it, and we will pass your request to them.

10Cookies and analytics

We use cookies that are needed to sign you in and keep your session secure. Product analytics record pseudonymous usage events so we can see which parts of the service work; they never include ledger contents or key material.

11Security

Ledger credentials are encrypted with keys held in a cloud key-management service. Each business's data is separated by row-level security enforced by the database. Two-factor sign-in is required, and every significant action is written to a tamper-evident audit trail. Details are on /security.

If a breach affects your personal data, we will tell you without undue delay and meet any notification duties that apply.

12Children

Gladpaid is a business service and is not directed at anyone under 18.

13Changes to this policy

When we change this policy we update the date on this page, and for a material change we email account owners before it takes effect.